CVE-2025-62217CWE-362

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

High · published November 11, 2025

CVSS v3.1
7.0
EPSS
0%
Percentile
18.0
In the wild
Unconfirmed
What it is

⚡ A sneaky race condition in the Windows Ancillary Function Driver for WinSock could let an authorized attacker elevate their privileges like a VIP guest crashing a private party! Think of it as two chefs trying to access the same secret ingredient at the same time. If one chef gets there just a moment faster, they could change the entire dish before the other chef notices! This means that an attacker could gain unauthorized access to sensitive areas of the system, potentially leading to the ability to install malicious software, access confidential information, or even take complete control of the device. It's a serious breach of security that could leave users vulnerable to all sorts of nefarious activities!

Put simply

Think of it as two chefs trying to access the same secret ingredient at the same time. If one chef gets there just a moment faster, they could change the entire dish before the other chef notices! This vulnerability arises from improper synchronization when multiple operations are executed concurrently, allowing an attacker with local access to manipulate shared resources and escalate their privileges.

What to do

This means that an attacker could gain unauthorized access to sensitive areas of the system, potentially leading to the ability to install malicious software, access confidential information, or even take complete control of the device. It's a serious breach of security that could leave users vulnerable to all sorts of nefarious activities! To protect yourself, ensure your Windows systems are updated to the latest version that addresses this issue. Regularly audit user permissions and monitor for any unusual activities that might indicate exploitation attempts. You've got this! With the right updates and vigilance, you can keep your system secure! 🛡️

The record
Technical detail
CVSS v3.1
7.0 · HIGH
Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
CVSS v4.0
Not supplied
EPSS
0.00268 · 18.0th percentile
Weakness
CWE-362 · Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
Published
2025-11-11T17:59Z
EPSS history
Timeline
  • 11 NOV 17:59Z
    Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
    cvelistv5